35dg Privacy Policy

Section 1

Information We Collect

35dg collects personal data through several distinct channels: directly from you when you register and use the platform, automatically through your device and browser when you visit the site, and from third-party payment providers involved in processing your transactions. The categories of data we collect are described in full below.

1.1 Registration Data

When you open a 35dg account, we collect the following information to create and maintain your account:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the 18+ age requirement.
• Mobile phone number — used for account verification, security alerts, and customer support.
• Email address — used for account communications, bonus notifications, and support correspondence.
• Username and hashed password — your login credentials; passwords are stored in hashed form and are never accessible in plain text by 35dg staff.
• Residential address — city and district within Bangladesh, collected during account verification.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and retain copies of:

• National Identity Card (NID) or passport.
• A recent utility bill or bank statement as proof of residential address.
• A screenshot or confirmation from a mobile banking wallet (bKash, Nagad, Rocket, or Upay) to verify that the payment method belongs to the account holder.
• A selfie photograph taken alongside your identity document, where enhanced verification is required.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal on the 35dg platform, we collect:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Transaction reference numbers provided by the payment provider.
• Deposit and withdrawal amounts in Bangladeshi Taka (BDT).
• Transaction timestamps and status records.

35dg does not store full card numbers or CVV codes for Visa or Mastercard transactions. Card data is handled exclusively by the payment gateway provider under their own PCI-DSS compliant security infrastructure.

1.4 Gameplay and Betting Data

We maintain records of your activity on the 35dg platform, including:

• Games played, bet amounts, and game outcomes (wins and losses).
• Sports betting selections, stake amounts, and settlement results.
• Bonus claims, wagering progress, and promotional participation history.
• Session start and end times, and total session duration.

This data is used for account management, responsible gaming monitoring, dispute resolution, and improving the 35dg product offering. It is also required for regulatory compliance and anti-money-laundering purposes.

1.5 Technical and Device Data

When you access the 35dg website, our servers automatically log certain technical information:

• IP address and approximate geographic location (city-level).
• Device type (desktop, mobile, tablet) and operating system.
• Browser type, version, and language settings.
• Referring URL (the page you visited before arriving at 35dg).
• Pages visited on 35dg and time spent on each page.
• Error logs and crash reports where applicable.

1.6 Customer Support Communications

When you contact the 35dg support team via email at [email protected] or through any in-platform support channel, we retain a record of the communication including the content of your messages, your account details as provided during the interaction, and the resolution applied. These records are kept to ensure continuity of support and to resolve any disputes that may arise.

Section 2

How We Use Your Data

35dg uses the personal data we collect solely for legitimate purposes that are directly related to operating a safe, fair, and compliant online gaming platform. The table below summarises each use case and its legal basis.

35dg does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review process. Responsible gaming alerts generated by our system are always reviewed by a support team member before any account-level action is taken.

Section 3

Data Sharing & Disclosure

35dg does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data security obligations.

3.1 Payment Processing Partners

To process your deposits and withdrawals, 35dg shares the minimum necessary transaction data with our payment processing partners, which include mobile financial services providers (bKash, Nagad, Rocket, Upay) and card payment gateways (for Visa and Mastercard transactions). These partners receive only the data required to execute and confirm the specific transaction and are prohibited from using that data for any other purpose.

3.2 Game Technology Providers

35dg integrates games developed and operated by third-party studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. When you launch a game from one of these providers within the 35dg lobby, a session token is passed to the game provider to authenticate your session and track gameplay for settlement purposes. Game providers do not receive your full personal profile and are contractually restricted from using session data beyond game operation and fairness auditing.

3.3 Identity Verification Services

35dg may engage third-party identity verification service providers to assist with KYC document checking and age verification. These providers process your identity documents solely for the purpose of verification and are not permitted to retain or use your documents for any unrelated purpose.

3.4 Legal and Regulatory Disclosure

35dg may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in response to a lawful formal request. We will, where legally permissible, notify affected account holders of such disclosures.

3.5 Business Transfers

In the event that 35dg undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via your registered email address, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

Section 4

Cookies & Tracking Technologies

35dg uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you logged in during your session, and to gather anonymised analytics data that helps us improve the product. This section explains the types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status and preferences — and to recognise your device on return visits. Cookies do not contain executable code and cannot directly harm your device.

4.2 Types of Cookies Used by 35dg

4.3 Managing Your Cookie Preferences

Strictly necessary cookies are essential for the 35dg platform to function and cannot be disabled. For functional and analytics cookies, you may adjust your preferences through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menus. Please note that disabling functional cookies may affect your experience on the 35dg platform, for example by resetting your lobby preferences on each visit.

Detailed instructions for managing cookies are available in the help documentation of all major browsers, including Chrome, Firefox, Safari, and the Samsung Internet browser commonly used on Android devices popular in Bangladesh.

Section 5

Data Security

35dg implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no digital system can guarantee absolute security, we take our obligation to protect your data seriously and continuously review and improve our security practices.

Technical Safeguards

• SSL/TLS encryption: All data transmitted between your browser or app and the 35dg servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser confirms this when visiting 35dg.app.
• Password hashing: Account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms to store password credentials, meaning even 35dg staff cannot read your password.
• Access controls: Access to personal data held on our systems is restricted on a need-to-know basis. Staff accounts are subject to role-based access permissions, and access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA): Internal 35dg systems used to manage player accounts are protected by multi-factor authentication to reduce the risk of staff account compromise.
• Secure document storage: KYC documents uploaded during identity verification are stored in encrypted form in access-controlled storage environments, separate from general application data.

Organisational Safeguards

• All staff members who handle personal data receive training on data protection obligations and secure data handling procedures.
• Third-party service providers who process personal data on behalf of 35dg are subject to data processing agreements that require them to maintain appropriate security standards.
• In the event of a data breach that poses a risk to your rights and freedoms, 35dg will notify affected users at the earliest opportunity using the contact details held on their accounts.

Section 6

Data Retention

35dg retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.

When personal data is no longer required for any of the above purposes and no legal retention obligation applies, 35dg will securely delete or anonymise it. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical analysis.

If you request deletion of your account and personal data, 35dg will action your request within 30 days, subject to any overriding legal retention obligations that prevent immediate deletion (such as the 7-year financial record requirement noted above). In such cases, we will confirm which data must be retained and the legal basis for doing so.

Section 7

Your Privacy Rights

As a player on the 35dg platform, you hold a number of rights in relation to your personal data. These rights apply regardless of where you are based within Bangladesh. To exercise any of these rights, contact our support team at [email protected] with your account details and a clear description of your request.

Exercising Your Rights

To exercise any of the rights described above, send a written request to [email protected] with the subject line "Privacy Rights Request". Please include your registered username and the specific right you wish to exercise. We will acknowledge your request within 5 business days and complete it within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

Requests are generally free of charge. Where requests are manifestly unfounded, repetitive, or excessive, 35dg reserves the right to charge a reasonable administrative fee or decline to act on the request, with written justification provided to you.

Section 8

Policy Updates & Contact

8.1 Changes to This Privacy Policy

35dg reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via their registered email address at least 14 days before the changes take effect. The updated policy will also be published on this page with a revised effective date clearly displayed.

Continued use of the 35dg platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree to the revised policy, you should stop using the platform and request account closure before the effective date.

For minor, non-material changes — such as clarifications of existing language, formatting corrections, or updates to contact information — we may update the policy without advance notice, though the effective date will always be updated to reflect the revision.

8.2 Children and Minors

18+ The 35dg platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that a minor has created an account, we will immediately suspend the account, delete all associated personal data, and refund any deposits made, in accordance with our responsible gaming obligations. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

8.3 Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns about how 35dg handles your personal data, please contact our support team using the details below. We aim to respond to all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

• Email: [email protected]
• Subject line for rights requests: "Privacy Rights Request"
• Subject line for general privacy queries: "Privacy Enquiry"
• Response time: Within 5 business days (Bangladesh Standard Time)

This Privacy Policy was last reviewed and updated on 1 January 2026. It governs all personal data processing activities carried out by 35dg in connection with the 35dg.app platform and its services to players based in Bangladesh.